Plain English

Rules, privacy and disclaimer

Short and plain. Your organizer runs your game. Version 2026-10-15.

Rules Privacy Disclaimer

Rules

The board is three rows of three squares. Two players take turns. X moves first, O second. Three of your marks in a row, in a column or on a diagonal win the game.
A full board with no three in a row is a draw. A drawn game is replayed at once with the marks swapped, up to three games, so every match has a winner. If all three games are drawn, fate decides.
Fate is a number made from the sealed seed, the board and the player. The lower number wins, and anyone can re-check it.
Who plays X first comes from a sealed random seed. Its fingerprint is public before anyone joins. The secret is shown after the start, so anyone can check the bracket.
Every move has a clock: 10, 20, 30 or 60 seconds, as the organizer chooses. When it runs out, the software plays a square for the player. Two clock-outs in a row lose the board.
The host can pause. While paused, no clock runs. A player who loses the connection can open the link again and see the board as it is.
In the knockout, players are placed in the bracket by a shuffle from the sealed seed, and winners move up. In a team game, teams have 3 or 5 players, with one board per seat. The team that wins more boards wins the match.
The final ranking has no ties: the round reached, then total points, then points in the last match, then fate. The results say in one line how each tie was decided.
The software decides every result. Its result is final.
The organizer and we have no way to change a draw or a result in the software.
Players never pay and never stake money. There are no cash prizes and no betting. Any gift is supplied by the organizer, outside the product.
Players are 18 or older, and the game is for company events.

Privacy & Data Policy

We delete all participant data from our systems within 24 hours after the game ends.
A game that never starts is treated the same way: its guests’ names and numbers are deleted 23 hours after the time it was meant to end.
All data is encrypted, in transit and at rest.
Where the data is: the website runs on Cloudflare’s global network. The database is kept in Cloudflare’s Asia-Pacific region.
Participants never see each other’s data.
A player can leave at any time, ask what we hold about them, or ask us to delete it, from the game page. We answer within 7 days.
A player can also name another person who may use these rights for them (DPDP Act, Section 14), from the game page or by writing to [email protected].
We provide the software. The organizer runs the game. Partners who refer organizers follow the partner terms.
The full notice is on its own page, the Privacy notice. It is available in Hindi on request. The providers we use are on the sub-processors page.
No advertising cookies or trackers. We never sell data.
Your phone keeps only the items listed under “What your device keeps” below. We use no other cookie.
Exception: the results are kept for 365 days as seat numbers and player codes, without names, and are then deleted automatically.
We keep billing data for audit and tax reasons.
Fair play. We keep a private, encrypted record of game activity to keep every game fair. Only we can see it. Removed automatically 365 days after your game ends. The record of an anonymous visitor (a request that was refused or failed) keeps only the first part of the network address and is removed after 90 days.
Public pages: a first-party visitor id and shortened network address, never names or mobile numbers, kept 365 days. With Global Privacy Control or Do Not Track, we only count visits.
Designed to follow India’s DPDP Act 2023, the EU GDPR and US state privacy laws such as the CCPA.
Your phone contacts YouTube (privacy mode) only if your organizer adds a video.
Guests are never e-mailed. Only the organizer and Hosts have an e-mail address on file.
Our hosting provider encrypts the database at rest. Names and numbers are also sealed with AES-256 inside it. From the moment a tournament starts, the names on the bracket are also held as plain text so that every phone can show them; they are deleted with the rest, 23 hours after the tournament ends. We store no payment card details.
You may also complain to a data protection authority, such as the Data Protection Board of India.
Questions or requests: our Grievance Officer, Rajat Agarwal, [email protected]. We reply within 30 days.

What your device keeps

On a player’s phone: a random device id, so one place stays on one phone.
On a player’s phone: the player id for each game and the last game opened, so the game comes back after a reload.
In an organizer’s browser, only when the console shows a trial of the phone page: a trial player’s id, device id and progress.
In an organizer’s browser tab, until the tab is closed: the sign-in, the e-mail and mobile number typed, and the page to open next.
In an organizer’s browser: a sign-in token and a random device id for the console.
In an organizer’s browser: the name, e-mail, mobile number and invoice details typed on the payment page, so the form is filled in next time.
In an organizer’s browser: which setup steps are done and which messages were sent, for each game.
On the Refer & earn page: the partner’s key, so the page opens again.
After a Refer & earn link: the partner’s code, so a purchase is credited to the partner.
The colour choice.
Whether the phone was already asked about notifications.
On the public pages only: a random visitor id and one first-party cookie, cbv, kept one year, to count visits. Never on game pages, never with names or numbers. With Global Privacy Control or Do Not Track no id is made.
On the public pages only, until the tab is closed: a visit number and what was already counted.
The only cookie: cbv, a random visitor id, first party, kept one year, on the public pages only.

Disclaimer

This is a private game for a closed group, run by your organizer.
Corporate Tic Tac Toe provides the software only. We never hold or pay prize money. Participants pay nothing to play and never stake money.
There are no cash prizes and no betting. Any gift is supplied by the organizer, outside the product.
The software decides every result. Results are final.
The organizer makes sure the game is allowed under local law.
We are not responsible for any gift the organizer supplies or for disputes between the organizer and participants.

No refunds, credit instead

We do not give refunds. If you cancel a paid game before it starts, your payment stays as credit for your next game for 365 days. Unused credit lapses at the end of day 365.
For 30 days after you cancel a paid game, you can move it to a new date. Your payment stays with that game.
If you use the credit for another game first, or 30 days pass, the game cannot be moved. The credit stays for a new game until it lapses.
The credit stays in the organizer’s account, and we e-mail the organizer before it lapses.
Once the start time has passed, a paid game cannot be cancelled. A game never paid for can be cancelled at any time, and nothing is charged.
A game that was not paid for closes when its guest data is erased, 23 hours after it was meant to end. See the Terms.

Accessibility

We want everyone to be able to use Corporate Tic Tac Toe, on a phone, a tablet or a laptop.
You can use the pages with a keyboard alone. The Tab key reaches every button, link and field, and the place you are at is outlined.
Text and buttons are checked for enough contrast, and every field has a label.
Headings, labels and live announcements help a screen reader follow the game.
We check this automatically before each release. If something stops you, write to [email protected] and we will fix it or find another way for you.